Learn OpenChainGraph

Everything that explains the standard in one place

OpenChainGraph turns a decision tool's output into a hash-anchored, agent-callable, verifiable artifact. This hub links every explainer, the technical specification and white paper, the compute-integrity deep dive, and the integration guides.

Written for engineers, auditors, and teams evaluating verifiable decision provenance. New here? Start with the first row and work down.

01 · Start here

Orientation

What the standard is, why it exists, and what it looks like in motion.

Positioning
Why OpenChainGraph
An honest prior-art comparison to in-toto, SLSA, OpenLineage, and AP2: what OCG borrows, what is genuinely new, and why the pieces only converged now.
Read → Interactive
How It Works
A twenty-two-stage walkthrough with a live SHA-256 demo: how artifacts hash, chain by parent_hash, and get verified by agents over MCP.
Open explainer → Comparison
Two Worlds
The compliance audit side by side: email chains, PDFs, and version drift today, versus hash-linked artifacts with OpenChainGraph.
Compare → Interactive
A Filled PDF Is a Claim. A Run Is a Receipt.
No vocabulary required. Type in your own numbers, run the same small task two ways, then try to fake the answer and watch the seal break.
Try it →
02 · Technical reference

The standard in depth

The normative material, the paper, and the deep dive on proving a computation ran the way it claims.

Normative
Technical Specification
The envelope schema, canonical hashing, the export and proof profiles, and the machine-checked conformance gate suite.
Read the spec → White paper
The Paper
Browser-native, hash-anchored provenance for deterministic, agent-callable decision artifacts, with the formal guarantees and measured costs.
Read the paper → Compute-integrity
Proving It Ran (§18)
Step by step, how a zkVM proof lets a verifier confirm a calculation ran the way it claims, without re-running it or seeing the inputs.
Read the deep dive → Compute-integrity
Proof Coverage and What Deferred Means
How much of the live graph carries a verifying zkVM receipt, the profile that requires one of every deterministic node, and the stated reason that lets a fresh node ship while it waits for its proving turn.
Read the deep dive → Compute-integrity
The Verification Story on the Kit
How a claim gets verified on this estate: the claim envelope with its two evidence types, the spec pipeline from clause snapshot to human sign-off, and the honest concessions — verified is not safe, and a proof over wrong logic still proves that wrong logic ran correctly.
Read the deep dive → Compute-integrity
How the Kernel VM Works
Same JS, three runtimes, one hash: why a kernel running in the browser, a sandboxed WebAssembly VM, and a zkVM guest must all agree, and the seven nondeterminism sources the deterministic compute profile bans.
Read the deep dive → Interactive
The AIN Bridge
How browser tools compose: prefill deep-links, Policy Mandate intake, and the postMessage bridge that hands an artifact from one tool to the next.
Open explainer → Deep dive
Machines Decide, Humans See Exceptions
How a gated chain runs the routine case straight through and hands the exception case to a person, with mortgage preflight and adverse action as shipped evidence.
Read the deep dive → Deep dive
Human Accountability in OpenChainGraph
How §27 records which named human took responsibility for a result: closed accountability roles, dual-control thresholds, time-boxed overrides, and an SD-JWT evidence bundle.
Read the deep dive → Deep dive
Signatures and Key Retirement
How a W3C Data Integrity proof lets a named key vouch for a whole artifact, how the two browser checks verify one, and what a BitstringStatusList revocation entry means for a receipt signed by a since-retired key.
Read the deep dive → Deep dive
Anchors and Transparency Logs
How an anchor binding shows an artifact's bytes existed by a point in time: RFC 3161 tokens from independent authorities, one Merkle root covering many artifacts, and eleven witnesses cosigning the estate's checkpoints on a public log.
Read the deep dive → Deep dive
The Evidence Estate
An animated walk from a SHA-256 digest through four anchoring rails, the Sigsum pending-to-included lifecycle and its twelve witnesses, offline verification, and ledger resolution, closing on what none of it claims.
Read the deep dive → Deep dive
OpenChainGraph and Blockchains
Animated scenes and a side-by-side table showing what OpenChainGraph shares with a blockchain and what it leaves out.
Read the deep dive → Deep dive
The Mandate Loop
How a signed Work Mandate compiles into literal gate objects, how a trigger halts a run and opens an exception, how a passkey closes it, and how a delegated agent's own identity chain traces back to a person.
Read the deep dive → Interactive
The Agent Staircase
Twenty animated steps from a single browser tool to agent prompts that carry receipts across workflows and blockchains, built from live runs.
Open explainer → Deep dive
How a Groth16 Receipt Is Made
Drawn scenes follow one real compute receipt from the kernel that produced it to the checks that bind it.
Open explainer → Deep dive
How Mechanical Verification Works
Drawn scenes walk the mechanical verification standard: the claim ladder and its three tiers, and a metamorphic property you can check by hand.
Read the deep dive → Deep dive
Mechanical Verification
What mechanical verification means and the commands that re-run every check.
Read the deep dive →
03 · Visual explainers

Visual explainers

One card for every page that carries animated scenes.

Hub
Visual explainers hub
Every animated walkthrough in one place, in a suggested order from beginner to advanced.
Open explainer → Interactive
One workflow step by step
An AI shopping agent is checked by three small pages, each computing inside your browser and leaving a receipt.
Open explainer → Interactive
Checking a calculation without redoing it
How a 256-byte proof confirms an official rule produced a result without the private data.
Open explainer → Interactive
How MCP runs one workflow
Every message between an AI assistant and the AINumbers MCP server during a three-step workflow.
Open explainer → Interactive
How WebMCP runs one workflow
The same three checks run by a browser agent through tools the pages register themselves.
Open explainer → Interactive
One agent makes one purchase through three workflows
Identity, both budgets, a held double order and one session receipt for a USD 120 purchase.
Open explainer → Interactive
Seven workflows run on one inverted database
Twenty-one page runs, a Merkle root and public timestamps, with a switch to run it all offline.
Open explainer → Interactive
What happens when you paste a workflow prompt
A chain page prompt followed through run_chain on the MCP worker to a verified hash.
Open explainer → Interactive
Three doors run the same workflows
WebMCP, the remote MCP server and Helm compared by where each step computes.
Open explainer → Interactive
How a kernel becomes a 256-byte proof
Four real kernels through the RISC Zero pipeline, from cycle preflight to an offline check.
Open explainer → Interactive
Ten live runs sealed under one timestamp
A real agent session bound into one receipt that three timestamp authorities signed.
Open explainer → Interactive
How OpenChainGraph Works
An interactive walkthrough of the OpenChainGraph standard.
Open explainer → Interactive
OpenChainGraph and Blockchains
An animated comparison of OpenChainGraph and a blockchain. Both link records by hash and fold them into Merkle roots.
Open explainer → Interactive
The AIN Bridge
How one self-contained tool page becomes an MCP Apps View inside an AI host and how its Policy Mandate receipt reaches an open ledger tab.
Open explainer → Interactive
The Agent Staircase
An animated staircase from one tool in a browser tab to an agent that carries verifiable receipts across workflows and blockchains.
Open explainer → Interactive
Cross-Machine Determinism
Report runs from physical machines re-ran the estate's kernels at pinned commits and compared output digests.
Open explainer → Interactive
A ChainGraph workflow built brick by brick
A 3D brick scene of one ChainGraph workflow. The x402-spend-evidence chain runs three catalog tools in order, each step cites the hash of the step before it, and the run folds into one composite hash that outside authorities timestamp. Every hash on the page is quoted from a live run of 26 September 2026.
Open explainer → Interactive
Break the wall
A 3D wall of proof layers. Pick one of seven tampers and see which layer catches it, which only warns and which cannot tell. Rows marked computed here run the real check in your browser on the Agent Staircase session, its signed Work Mandate and the art-07 Groth16 receipt.
Open explainer → Interactive
The auditor's walk
A regulator checks a real evidence bundle from the top of the wall down: three timestamps, the session root, a Groth16 receipt, kernel identity, a signature and execution hashes. Each stop says what a pass teaches and what it cannot, and the walk ends with a verification memo.
Open explainer → Interactive
The receipt tree
Ten real run hashes fold into one timestamped Merkle root. Edit one run and watch only its path to the root break, then prove a single run from four sibling hashes without the other nine.
Open explainer → Interactive
The AINumbers estate as a brick neighborhood
An interactive brick model of the AINumbers estate. Eight walls stand for its parts, from the tool catalog to Helm, and thirteen roads show how they work together. Drag to spin the view, watch the recorded tour, and open the page behind each wall.
Open explainer → Interactive
The Agent Staircase as 3D bricks
An interactive brick model of the Agent Staircase. Fourteen bricks stack into five layers, from the tool page to the timestamped receipt, and every brick opens the explainer step behind it. Drag to spin the wall, then trace a run through the finished stack.
Open explainer → Interactive
Groth16 Receipts
What each field of a compute receipt means and a step-by-step reading of one real receipt from the repository.
Read → Interactive
What the Groth16 Proof Attests
What a groth16 proof over a quantized credit-scoring kernel actually attests.
Open guide → Interactive
Core Payment Infrastructure Hub
Free browser-based payment infrastructure tools, from A2A fee routing to reconciliation workbenches.
Open guide → Interactive
AML/KYC and Financial Crime Compliance Hub
Browser-based AML/KYC and financial crime compliance tools unified as a single onboarding suite.
Open guide → Interactive
Agentic Commerce and MCP Developer Hub
Free browser-based developer tools for building Model Context Protocol servers and integrating agentic payment protocols.
Open guide → Interactive
Example Prompts
Every AINumbers example prompt on one page, with full copy-paste bodies.
Read → Interactive
MCP Server Documentation
Official documentation for the AINumbers MCP server at mcp.ainumbers.co/mcp.
Read → Interactive
About AINumbers
What AINumbers.co is and how it relates to Post Oak Labs.
Read → Interactive
Infrastructure Map
The generated map of AINumbers.co, grouped by the job each page does.
Explore → Interactive
Deploy Integrity on ainumbers.co
Every deploy of ainumbers.co publishes a manifest and a sha256 line per published file. Run the two checks that connect a downloaded file to the commit that shipped it.
Open explainer → Interactive
The chaingraph.json Catalog
What chaingraph.json contains, how the per-node shards on disk become that one file, where copies of it live, and how to verify a downloaded copy with a checksum line and a Sigstore attestation.
Open explainer → Interactive
The AINumbers Policy Mandate
What each member of the Policy Mandate v1.0 schema holds and the two gates that check the document before a download can happen: the export button's own validation and the repository's reference validator.
Open explainer →
04 · Build and verify

Hands-on tools and integration

Compose, verify, export, and self-certify. Several of these run entirely in your browser.

Integration
Integration Guide
How to implement, self-certify, and badge a tool as OpenChainGraph-conformant. Envelope schema, canonicalization, and the conformance suite.
Read the guide → Export profiles
Export a Verified Artifact
Render a verified artifact as xlsx, csv, pdf, or xbrl with the export profiles, all downstream of a fixed execution_hash.
Read the guide → Educational tool
Chain Builder
A hands-on teaching tool: click to compose a multi-step workflow and watch the parent_hash provenance form as you go.
Try it → Tamper lab
Live Sandbox
Edit an artifact live and watch the execution_hash recompute in your browser. Tamper with a field and see exactly why the fingerprint breaks.
Open sandbox → Verifier
Verify an Artifact
Paste any OpenChainGraph artifact and verify its execution_hash client-side. Nothing leaves your browser.
Verify now → Agent ledger
Agent Work Ledger
Verify agent-produced records in your browser: replay gate decisions, inspect the decision path, and check the execution hash. Accepts dropped files, pasted JSON, or fragment links from MCP tool responses.
Open ledger → Concepts
Where It Fits
Application concepts across generative art, gaming, AI agents, payments, and more, for teams exploring where verifiable decisions belong.
Explore → Live implementation
ApexLogics OpenChainGraph Suite
A sister site running 13 persona-based OpenChainGraphs across 145 tools in production, each step a hash-anchored Policy Mandate artifact.
Open suite → Guide hub
Corporate Treasury STP
ISO 20022 camt.053 reconciliation, multilateral netting, hedge effectiveness under ASC 815, and eBAM account lifecycle, six nodes and four chains deep.
Open guide → Guide hub
Fair Lending and Adverse Action
Adverse action notices, the 4/5ths disparate-impact rule, HMDA rate spread, MLA and SCRA rate caps mapped to Reg B, ECOA, FCRA, and CARD Act, across four OCG chains.
Open guide → Guide hub
Insurance STP and Underwriting
Parametric trigger payouts, cat bond terms, life illustration self-support tests, and NAIC RBC action levels, mapped to IAIS ICP 19 and openIDS v1.0.
Open guide → Guide hub
US Mortgage Compliance Core
Reg Z Appendix J APR solving, TRID tolerance cure, QM points-and-fees, and the first live gated OCG chain in production.
Open guide → Guide hub
Allocation Evidence
art-515 re-derives whether an optimizer's allocation is explained by the eligibility, inventory, haircut and objective inputs declared for it, portable beyond collateral to any allocation decision.
Open guide → Guide hub
Conditional-Relief Evidence
art-514 shows per acceptance and per day that every condition of a conditional regulatory relief held, checks for a stale relief version, and computes the revocation-exposure figure if the relief were withdrawn.
Open guide → Guide hub
Remittance Corridors and Stablecoin Economics
Reg E subpart B disclosure arithmetic, World Bank RPW corridor-cost benchmarking, and a stablecoin corridor case study against Felix and Circle USDC.
Open guide → Guide hub
Revenue Operations STP
Commission hierarchy validation, ASC 340-40 amortization, statement reconciliation, and NAIC/NIPR producer license reciprocity across two OCG chains.
Open guide → Guide hub
Robinhood Chain Workflows
Seven verified chains over Arbitrum Orbit and BoLD fraud proofs: multiplier reconciliation, regime mapping, collateral haircuts, and AP redemption stress.
Open guide → Live monitor
GENIUS Continuous Reserve Watch
A receipted weekly monitor that runs the reserve-disclosure kernel, signs a receipt over the result, and logs a CloudEvents envelope. Zero PII.
Open monitor → Deep dive
Settlement Asset Lifecycle
An animated, eight-stage walk from backing through collection, netting, disbursement, reconciliation and control evidence. Some settlement assets have no backing set to check at all, and wallet limits, offline capability and the redemption path reach into stages well beyond backing.
Read the deep dive → Deep dive
Public-Money Evidence
An animated walk through seven independent questions an outside audit authority can check without touching the operator's database: settlement, attribution, reconciliation, the audit trail, bulk-run authorisation, migration completeness, and operator exit.
Read the deep dive → Conformance
How Receipt Conformance Works
How the public OpenChainGraph conformance corpus pins the execution_hash and the four checks the standalone verifier runs.
Read the deep dive →
05 · Standards building blocks

How OCG meets the standards you already use

One short guide per interoperability layer. Each shows the exact mapping and how to declare conformance.

SLSA
buildType and SLSA
Align the buildType URI with SLSA provenance: identify the hash construction and satisfy SLSA levels.
Read → in-toto
in-toto Envelopes
Wrap artifacts in DSSE in-toto envelopes, sign with Ed25519, and compose with Sigstore and cosign.
Read → W3C PROV
W3C PROV-DM
Map OpenChainGraph chains onto the W3C PROV data model for interchange with provenance tooling.
Read → Signing
Ed25519 Keys
Generate, store, and rotate Ed25519 keys for the audit_signature envelope, signing in the browser with WebCrypto.
Read → Conformance
Profile Conformance
Declare profile conformance with dereferenceable dct:conformsTo URIs a verifier can follow.
Read → Payments
ISO 20022
Overlay ISO 20022-aligned payment fields on an artifact for financial-message interchange.
Read → Knowledge
Open Knowledge Format
Add an OKF companion bundle that maps graph edges to machine-readable concept documents.
Read → Observability
OpenTelemetry
Map decision chains onto OpenTelemetry traces: execution_hash to spanId, parent to parentSpanId.
Read → Compliance
Decision-Receipt Crosswalk
Field-by-field alignment: OCG artifact (execution_hash §4, kernel identity §17, anchor_bindings §20) vs. EU AI Act Art 12(2), ECOA Reg B §1002.12, ASC 815, and IETF agent audit trail.
Read → Interop
KYA-OS / Checkpoint Interop Note
Informative, non-conformant: which org.kya-os/response-proof ProofMeta fields OCG's shipped did:key/did:web (§9, §16.4), JCS, and Ed25519 primitives can populate, and which stay marked absent.
Read → Conformance
Verified Build Badge Program
Criteria, registry, and badge asset for the self-declared conformance mark tied to the OCG v0.4 §15 gate suite.
Read →
06 · Autonity Historical Series

How a live decentralised derivatives protocol worked

Five interactive explainers preserving the mechanics of Autonity's Autonity Financial Protocol (AFP) and Decentralised Clearing Contract (DCC). Autonity stood down in February 2026. These pages document what it built — and where every mechanic lives today.

E-01 · Markets
Prediction Market Mechanics
Binary versus scalar forecast contracts, payoff formulas, and an interactive PnL calculator seeded with Autonity Season 1 context.
Open explainer → E-02 · Margin
Margin, Maintenance & Liquidation
How the DCC tracked position health in real time: unrealised PnL, margin buffer, liquidation price, and the GREEN/AMBER/RED health system.
Open explainer → E-03 · Clearing · Centerpiece
AFP/DCC Venue-Agnostic Clearing
The two-key model that separated margin custody from trade intent — and why every mechanic it proved out now runs in production somewhere under a different name.
Open explainer → E-04 · Competition
Forecastathon Season Scoring S1–S4
How Autonity scored its forecasting competition: a four-component composite (performance, volume, accuracy, referrals) for S1–S3, simplified to PnL for S4.
Open explainer → E-05 · Monetary Design
ACU Currency Basket: SDR-Method Valuation
How the Auton Currency Unit tracked a fixed-amount basket of seven currencies using the same methodology the IMF uses for the Special Drawing Right.
Open explainer →